Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8cd78cc-e27a-36f6-8961-0d2f56670694.roa
File:                     e8cd78cc-e27a-36f6-8961-0d2f56670694.roa (raw, json)
Hash identifier:          9hrr4UkHAJ9S9Yg8ccWactmDAmSSPLBNnAlyLYZk9E8=
Subject key identifier:   08:0A:45:F7:84:33:5B:4A:3E:25:F0:15:D1:DB:31:DA:85:84:85:08
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410CD0FF85CCB041363C000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8cd78cc-e27a-36f6-8961-0d2f56670694.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:1c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:cd:0f:f8:5c:cb:04:13:63:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=aca3ac40-ae65-4b7f-9a2d-e642fbfc77d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:07:f6:52:e5:bb:59:1d:84:70:fa:f9:52:e5:
                    12:d3:1c:86:c4:1e:c4:e4:62:ec:0f:0d:d9:ed:81:
                    7d:bd:c2:0e:1e:65:e9:b4:12:1d:a7:62:61:c3:8f:
                    a3:75:22:b8:8c:6b:d5:23:de:7e:92:a5:d3:36:de:
                    21:d4:e1:ef:a4:39:e2:9a:0b:69:5a:f3:fa:7d:3a:
                    6b:d7:2e:48:23:d0:17:a8:44:a1:5f:97:37:5e:21:
                    e3:35:80:f2:5b:b8:29:95:4e:76:d7:3a:76:4d:13:
                    14:44:99:8d:f3:72:2c:33:f6:a9:fb:c4:8b:8c:e5:
                    5e:78:3a:fb:5a:fe:7c:43:45:eb:ca:8e:d8:88:af:
                    43:6e:be:44:2b:e1:83:aa:f8:95:ca:56:2f:fc:d2:
                    0d:b8:8d:f9:c9:d8:e6:77:fa:11:fb:f3:34:28:67:
                    a7:79:c5:29:5c:98:bd:be:e1:94:8c:ea:e3:ae:25:
                    7c:e4:e3:c9:49:a8:d2:7e:10:6d:93:d7:3d:e1:be:
                    d3:de:0f:a4:5b:58:a0:fc:85:c1:bc:ef:2b:49:f0:
                    ee:e2:84:c8:99:38:12:c6:3e:a8:e0:8d:3d:a7:31:
                    aa:5e:fc:04:85:ce:d8:53:8a:05:6c:d8:0b:82:63:
                    0b:15:1f:58:1d:d8:2f:4f:97:fc:fb:63:de:3e:01:
                    e6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0A:45:F7:84:33:5B:4A:3E:25:F0:15:D1:DB:31:DA:85:84:85:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8cd78cc-e27a-36f6-8961-0d2f56670694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1c80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:0a:17:c4:f8:2f:67:41:d4:52:d9:9a:6b:0c:f1:07:ae:
         1a:b0:c1:18:f7:28:ee:8c:ab:bc:40:98:60:f2:d2:06:44:fb:
         cc:c5:05:5a:18:1a:61:65:00:42:60:33:eb:e7:4f:3c:75:ac:
         d6:58:4c:c5:59:93:7b:42:7d:b2:a8:0e:7c:e6:54:4a:5b:ee:
         e5:de:0e:46:f9:9b:42:8a:e2:5b:b2:d9:5c:51:7a:6f:3c:2c:
         d6:ae:4a:22:e7:e4:c6:09:41:07:d6:83:14:55:77:da:57:a0:
         87:ec:87:52:67:9a:32:9a:3c:14:13:fb:e4:3b:c5:79:33:84:
         39:98:6c:c8:e9:e9:28:bb:52:80:2b:b6:16:c6:f9:1a:81:92:
         4e:fe:0e:c8:b0:d4:b3:87:ed:34:9b:4d:69:ba:71:c5:59:fc:
         1c:50:11:29:be:e5:b8:a9:83:d5:74:e7:4c:97:86:3a:05:71:
         a5:70:17:02:a6:6c:4b:5b:21:fc:48:77:32:54:bc:4b:6c:d3:
         2b:ab:1f:5a:8f:13:66:6b:59:32:ee:47:7b:4e:47:2c:52:e5:
         37:73:c7:96:05:d2:47:51:4c:dc:91:4a:5b:f2:32:1a:51:4b:
         15:76:a2:e7:27:ba:5c:1e:44:26:1f:89:0e:e3:14:46:29:51:
         df:63:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:38 2025 by rpki-client